1 |
|
2003-11-01 Sergey Poznyakoff |
2 |
|
|
3 |
|
Added tunnel protocol support (RFC 2868) |
4 |
|
|
5 |
|
* NEWS: Updated. |
6 |
|
* include/radius.h (AP_ENCRYPT_RFC2138) |
7 |
|
(AP_ENCRYPT_RFC2868): New defines. |
8 |
|
(encrypt_tunnel_password,decrypt_tunnel_password): New functions. |
9 |
|
* include/radiusd.h (proxy_request_recode): Changed prototype. |
10 |
|
* lib/client.c (_encode_pairlist): Decode attributes that have |
11 |
|
AP_ENCRYPT bits set. |
12 |
|
* lib/cryptpass.c: Rewritten to match both rfc 2138 and 2868. |
13 |
|
(encrypt_text,decrypt_text) |
14 |
|
(encrypt_tunnel_password,decrypt_tunnel_password): New functions. |
15 |
|
* lib/dict.c (_dict_attribute): Handle new flags 'E' and 'T'. |
16 |
|
Removed handling or non-existing bit AP_REQ_CMP (however, 'c' |
17 |
|
flag is still recognized for compatibility. It's a no-op now). |
18 |
|
* raddb/dictionary (User-Password,CHAP-Password): Mark with E. |
19 |
|
* raddb/dict/tunnel (Tunnel-Password): Mark with T |
20 |
|
* radiusd/auth.c (sfn_validate): Be more picky about selecting |
21 |
|
the new state. |
22 |
|
(req_decrypt_password): Handle both AP_ENCRYPT bits. |
23 |
|
* radiusd/forward.c: Updated calls to proxy_request_recode(). |
24 |
|
* radiusd/proxy.c (proxy_request_recode): Changed declaration. |
25 |
|
Handle both AP_ENCRYPT bits. |
26 |
|
(proxy_receive): Recode server reply pairs. |
27 |
|
* radiusd/radius.c (radius_decrypt_request_pairs) |
28 |
|
(radius_destroy_pairs,_extract_pairs): Handle both AP_ENCRYPT |
29 |
|
bits. |
30 |
|
* radiusd/radutil.c (attr_to_str): Handle both AP_ENCRYPT bits |
31 |
|
* radiusd/rewrite.y (rw_attrs0): Handle both AP_ENCRYPT bits |
32 |
|
|
33 |
2003-10-31 Sergey Poznyakoff |
2003-10-31 Sergey Poznyakoff |
34 |
|
|
35 |
* radiusd/radius.c: (radius_send_reply): Bugfix |
* radiusd/radius.c: (radius_send_reply): Bugfix |